VulnerabilityModified
CVE-2017-12735
A vulnerability has been identified in LOGO!
HIGH 7.4EPSS 1.13%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.13%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). An attacker who performs a Man-in-the-Middle attack between the LOGO! BM and other devices could potentially decrypt and modify network traffic.
- CVSS 3.1
- 7.4 HIGHCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
- EPSS
- 1.13% probability · 64th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-300
- Affected
- siemens/logo\! 8 bm firmware
- Source
- productcert@siemens.com
References
- http://www.securityfocus.com/bid/100561Third Party Advisory, VDB Entry
- https://cert-portal.siemens.com/productcert/pdf/ssa-087240.pdfVendor Advisory
- http://www.securityfocus.com/bid/100561Third Party Advisory, VDB Entry
- https://cert-portal.siemens.com/productcert/pdf/ssa-087240.pdfVendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.